Java
Java
Set a Per-Recipient JWE Header
See more JSON Web Encryption (JWE) Examples
Demonstrates Jwe.SetRecipientHeader, which sets the per-recipient unprotected header for a recipient index.
Background. Per-recipient headers carry recipient-specific values such as a key id (
kid), and are used with the JSON serialization forms that support multiple recipients.Chilkat Java Downloads
import com.chilkatsoft.*;
public class ChilkatExample {
static {
try {
System.loadLibrary("chilkat");
} catch (UnsatisfiedLinkError e) {
System.err.println("Native code library failed to load.\n" + e);
System.exit(1);
}
}
public static void main(String argv[])
{
boolean success = false;
CkJwe jwe = new CkJwe();
// Protected header: AES key-wrap with AES-256-GCM content encryption.
CkJsonObject header = new CkJsonObject();
header.UpdateString("alg","A256KW");
header.UpdateString("enc","A256GCM");
success = jwe.SetProtectedHeader(header);
if (success == false) {
System.out.println(jwe.lastErrorText());
return;
}
// The 256-bit key-wrapping key (base64) for recipient index 0. In production, obtain the key from a
// secure source rather than hard-coding it.
String base64Key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=";
success = jwe.SetWrappingKey(0,base64Key,"base64");
if (success == false) {
System.out.println(jwe.lastErrorText());
return;
}
// Set the per-recipient unprotected header for recipient 0, for example a key id used to identify
// which key a recipient should use.
CkJsonObject recipHeader = new CkJsonObject();
recipHeader.UpdateString("kid","recipient-key-1");
success = jwe.SetRecipientHeader(0,recipHeader);
if (success == false) {
System.out.println(jwe.lastErrorText());
return;
}
CkStringBuilder sbContent = new CkStringBuilder();
sbContent.Append("This is the secret content.");
CkStringBuilder sbJwe = new CkStringBuilder();
success = jwe.EncryptSb(sbContent,"utf-8",sbJwe);
if (success == false) {
System.out.println(jwe.lastErrorText());
return;
}
System.out.println(sbJwe.getAsString());
}
}